phmega Privacy Policy
This Privacy Policy explains how phmega collects, uses, stores, and protects your personal data when you access our platform and services. We are committed to safeguarding the privacy of every Filipino player in full compliance with the Philippine Data Privacy Act of 2012.
Your Privacy, Protected
phmega is committed to handling your personal data responsibly, transparently, and in full accordance with Philippine law. Here are the six core principles guiding how we treat your information.
Data Security First
phmega implements industry-standard encryption (TLS 1.3), secure data storage, and access controls to protect your personal information from unauthorised access, disclosure, or misuse. Security reviews are conducted regularly in line with PAGCOR requirements.
No Third-Party Data Sales
phmega does not sell, rent, or trade your personal information to third parties for marketing or commercial purposes. Your data is used exclusively for account management, regulatory compliance, service delivery, and improvement of the phmega platform.
RA 10173 Compliance
All personal data processing activities at phmega are governed by Republic Act 10173 — the Philippine Data Privacy Act of 2012 — and its implementing rules. We maintain a registered Data Protection Officer (DPO) in compliance with NPC requirements.
Your Rights Are Respected
As a phmega player, you have the right to access, correct, object to, and request deletion of your personal data at any time, subject to applicable legal retention requirements. Requests are processed within 15 working days of receipt and verification of your identity.
Full Transparency
We tell you exactly what data we collect, why we collect it, how long we keep it, and who we share it with. There are no hidden data practices at phmega. This Privacy Policy is written in plain English so every Filipino player can understand their rights.
Minimal Data Collection
phmega follows the principle of data minimisation — we only collect personal information that is strictly necessary for the purpose for which it is gathered. We do not collect excessive data, and we do not retain your information beyond the legally required retention period.
// 01 Introduction
Welcome to phmega. This Privacy Policy sets out how phmega ("we," "us," "our") collects, uses, stores, discloses, and protects the personal data of individuals ("you," "player," "user") who access or use the phmega online gaming platform at phmega.net and all associated services, including but not limited to casino games, sportsbook, live dealer games, bingo, slots, and the phmega Login portal.
phmega operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the requirements of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.
By registering for a phmega Account, accessing the phmega platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to any part of this Privacy Policy, please discontinue use of the phmega platform and contact our support team to close your Account.
This Privacy Policy forms part of the phmega Terms and Conditions. Defined terms used in this Policy carry the same meaning as those in the phmega Terms and Conditions unless otherwise specified here.
// 02 Data We Collect
phmega collects personal data that is necessary, relevant, and limited to the purposes for which it is processed. The categories of personal data we collect are described below.
2.1 Registration & Identity Data
When you register a phmega Account, we collect: full legal name, date of birth, email address, Philippine mobile number, and a username and password of your choosing. This data is mandatory — without it, we cannot create or manage your Account.
2.2 KYC & Verification Data
In compliance with PAGCOR requirements and Philippine AML regulations, we collect government-issued identification documents for identity verification. Acceptable documents include the PhilSys National ID, UMID, Philippine passport, and driver's license. We may also collect proof of address documents and, in certain circumstances, source-of-funds documentation.
2.3 Financial & Transaction Data
We collect data relating to deposits, withdrawals, and payment methods used on phmega, including GCash account references, PayMaya account references, and bank account details for BPI, BDO, Metrobank, and other accepted Philippine banking channels. We do not store full card numbers or full bank account credentials — only the references necessary to process and verify transactions denominated in Philippine Peso (PHP).
2.4 Gaming & Activity Data
We record data related to your use of the phmega platform, including: game sessions played, wager amounts, game outcomes, bonus activations and usage, login timestamps, session durations, and responsible gaming tool activations (e.g., deposit limits set, cool-off periods initiated).
2.5 Technical & Device Data
We automatically collect certain technical data when you access phmega, including: IP address, device type and operating system, browser type and version, screen resolution, referring URL, and pages visited within the phmega platform. This data is collected for security monitoring, fraud prevention, and service optimisation purposes.
2.6 Communications Data
If you contact phmega support, submit a complaint, or communicate with us via any channel, we retain a record of that correspondence — including email content, support ticket details, and any attachments you provide — for quality assurance, compliance, and dispute resolution purposes.
| Data Category | Examples | Mandatory? |
|---|---|---|
| Registration & Identity | Full name, DOB, email, mobile | Yes |
| KYC Documents | Gov't ID, proof of address | Yes (for withdrawals) |
| Financial & Transaction | GCash ref, bank name, deposit history | Yes (for transactions) |
| Gaming Activity | Game logs, bet history, session data | Automatic |
| Technical & Device | IP address, browser type, device OS | Automatic |
| Communications | Support tickets, emails | When you contact us |
// 03 How We Use Your Data
phmega uses your personal data only for the purposes stated below. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your separate consent.
- Account creation and management: To register your phmega Account, authenticate your phmega Login sessions, and manage your Account settings and preferences.
- KYC and identity verification: To verify your identity and confirm that you meet the 21+ age requirement mandated by PAGCOR regulations before activating full account functionality.
- Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted Philippine payment methods in Philippine Peso (PHP).
- AML and fraud prevention: To monitor transactions and gaming activity for patterns consistent with money laundering, fraud, bonus abuse, or other financial crimes, in compliance with Philippine AML laws and PAGCOR directives.
- Regulatory compliance and reporting: To fulfil our obligations under PAGCOR licensing requirements, the Philippine Data Privacy Act, and other applicable Philippine laws and regulations.
- Responsible gaming monitoring: To track gameplay behaviour and facilitate responsible gaming tools including deposit limits, session time reminders, cool-off periods, and self-exclusion — in accordance with our PAGCOR license obligations.
- Customer support: To respond to your enquiries, complaints, and support requests promptly and effectively.
- Service improvement: To analyse platform usage patterns, improve game offerings, optimise user experience, and develop new features relevant to Filipino players.
- Security monitoring: To detect and prevent unauthorised access to phmega Accounts, protect against cyberattacks, and investigate suspected violations of our Terms and Conditions.
- Promotional communications: To send you relevant promotions, bonus offers, and platform updates — only where you have opted in to receive such communications and subject to your right to opt out at any time.
// 04 Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012 (RA 10173), phmega processes your personal data on the following legal bases:
- Contractual necessity: Processing necessary for the performance of our contract with you as a registered phmega player — including account management, transaction processing, and game delivery.
- Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing requirements, AML regulations, and the Data Privacy Act itself.
- Legitimate interests: Processing necessary for phmega's legitimate interests in operating a secure, fair, and commercially viable online gaming platform — including fraud prevention, security monitoring, and service improvement — where such interests are not overridden by your rights.
- Consent: For processing activities that go beyond contractual necessity and legal obligation — such as sending you promotional communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without detriment to your Account.
Note: Where phmega relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by updating your Account communication preferences via the phmega Login portal or by contacting our support team.
// 05 Data Sharing & Disclosure
phmega does not sell your personal data. We may share your personal data with third parties only in the limited circumstances described below.
5.1 Regulatory and Law Enforcement Authorities
phmega is legally obligated to share certain personal data and transaction records with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law, court order, or regulatory directive. Such disclosures are made strictly within the scope of our legal obligations.
5.2 Payment Service Providers
We share the minimum necessary financial and identity data with our approved Philippine payment service providers — including GCash, PayMaya, and partner banks such as BPI, BDO, and Metrobank — to process your deposits and withdrawals in Philippine Peso. These partners are bound by their own privacy obligations and applicable Philippine financial regulations.
5.3 Technology and Service Partners
phmega works with carefully selected technology partners including cloud hosting providers, game software studios, fraud detection services, and customer support platform providers. These partners are granted access only to the personal data they need to perform their contracted services for phmega, are bound by data processing agreements, and are not permitted to use your data for any other purpose.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of phmega's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it before the transfer takes effect.
phmega will never share your personal data with third-party advertisers, data brokers, or unrelated commercial entities. Any sharing beyond the categories described above requires your explicit prior consent.
// 06 Data Retention
phmega retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, subject to minimum retention periods required by applicable Philippine law.
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR / AML obligation |
| KYC documents | Duration of account + 5 years post-closure | AMLC / RA 9160 |
| Transaction records | 5 years from transaction date | AMLC / RA 9160 |
| Gaming activity logs | 3 years from session date | PAGCOR license requirement |
| Support correspondence | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Until withdrawal of consent + 1 year | RA 10173 accountability |
Once the applicable retention period expires, phmega will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data is anonymised, the resulting information is no longer personal data and may be retained for statistical and analytical purposes indefinitely.
// 07 Cookies & Tracking Technologies
phmega uses cookies and similar tracking technologies on the phmega platform to provide essential functionality, analyse platform performance, and improve your user experience. The categories of cookies we use are as follows:
- Strictly necessary cookies: Required for the platform to function correctly, including maintaining your phmega Login session, remembering your security preferences, and enabling core functionality. These cookies cannot be disabled without breaking core platform features.
- Performance and analytics cookies: Used to collect anonymised or pseudonymised data on how players use the phmega platform — including which pages are visited most frequently and how players navigate between sections. This data helps us improve the platform for all Filipino users.
- Functional cookies: Used to remember your preferences such as language settings, responsible gaming limit preferences, and display settings, so that you do not need to re-enter them on each visit.
- Security cookies: Used to detect and prevent fraudulent activity, support our AML monitoring systems, and identify unusual login behaviour that may indicate unauthorised access to your Account.
You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will affect the functionality of the phmega platform. phmega does not use third-party advertising cookies or cross-site tracking technologies for commercial advertising purposes.
// 08 Your Rights Under RA 10173
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmega. To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 13.
You have the right to know how your personal data is collected, processed, and used by phmega, as set out in this Privacy Policy.
You may request a copy of the personal data phmega holds about you at any time. We will respond within 15 working days of verifying your identity.
You have the right to correct inaccurate or incomplete personal data held by phmega by contacting support or updating your Account profile.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.
You may object to processing of your personal data based on legitimate interests, including the right to opt out of marketing communications at any time.
You may request a copy of your personal data in a structured, commonly used format for transfer to another service, where technically feasible.
Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
If you are unsatisfied with how phmega handles your personal data, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
How to Exercise Your Rights: Submit your request in writing to our Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." Include your registered Account email address and a clear description of the right you wish to exercise. We may request additional identity verification before processing your request.
// 09 Data Security
phmega implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures in place include:
- End-to-end encryption of data in transit using TLS 1.3 across all phmega platform connections;
- Encryption of sensitive personal data at rest in our database infrastructure;
- Multi-factor authentication options for phmega Login sessions;
- Role-based access controls limiting staff access to personal data strictly on a need-to-know basis;
- Regular vulnerability assessments and penetration testing of the phmega platform;
- Continuous monitoring for anomalous access patterns and potential data breach indicators;
- Formal data breach response procedures aligned with NPC notification requirements under RA 10173.
In the event of a personal data breach that is likely to result in serious harm to affected data subjects, phmega will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required by RA 10173 and NPC Circular 16-03.
While phmega takes every reasonable precaution to protect your data, no system is completely impervious to attack. You also have a responsibility to protect your Account by using a strong, unique password and enabling any available two-factor authentication for your phmega Login. Do not share your credentials with anyone.
// 10 Children & Minors
The phmega platform is strictly for adults. In accordance with PAGCOR regulations, the minimum age to register and use a phmega Account is 21 years of age. phmega does not knowingly collect personal data from individuals under the age of 21.
If you are a parent or guardian and believe that a minor has registered a phmega Account or provided personal data to phmega without your consent, please contact our support team immediately at [email protected]. Upon verification, we will promptly close the Account, void any associated transactions, and securely delete the minor's personal data from our systems.
phmega employs age verification checks as part of the registration process and KYC verification. Any Account found to have been registered by a person under 21 years of age will be closed immediately, all funds will be returned (net of any bonuses and voidable winnings), and the matter may be referred to PAGCOR as required under our licensing obligations.
// 11 Third-Party Links
The phmega platform may contain links to third-party websites or services — for example, links to payment provider portals or regulatory authority pages. These third-party sites operate independently of phmega and are not covered by this Privacy Policy. phmega accepts no responsibility for the privacy practices or content of any third-party site.
We encourage you to review the privacy policy of any third-party site you visit. The inclusion of a link on the phmega platform does not constitute an endorsement of that site's privacy practices.
// 12 Changes to This Privacy Policy
phmega reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. The most current version of this Privacy Policy will always be published at phmega.net/privacy-policy.
For material changes that significantly affect your rights or how we process your personal data, phmega will provide advance notice to registered players via their registered email address at least 15 days before the changes take effect. Your continued use of the phmega platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.
Current Version: This Privacy Policy was last reviewed and updated on 1 January 2026. Check this page periodically to stay informed about how phmega is protecting your personal information.
// 13 Contact & Data Protection Officer
phmega has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and NPC regulations. The DPO is responsible for overseeing phmega's data protection strategy and ensuring compliance with RA 10173.
If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by phmega, please contact our DPO and support team using the following details:
phmega Data Protection Officer
Email: [email protected]
Subject Line: "Privacy Enquiry" or "Data Subject Rights Request"
Response Time: Within 15 Philippine working days of identity verification
Hours: 24 hours a day, 7 days a week, Philippine Standard Time (PST, UTC+8)
If you remain unsatisfied after contacting our DPO, you have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines, the government agency responsible for enforcing RA 10173.
Your Data Is Safe at phmega
Now that you know exactly how phmega protects your personal information, you can play with full confidence. Join over one million Filipino players on the Philippines' most trusted PAGCOR-licensed online casino — deposit via GCash, claim your welcome bonus, and experience real casino action on your terms.
21+ Only · PAGCOR Licensed · Play Responsibly · RA 10173 Compliant